7.8

CVE-2026-64529

crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - remove unused character device and IOCTLs

The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs
for device configuration, start, stop, status query and enumeration.
These IOCTLs are not part of any public uAPI header and have no known
in-tree or out-of-tree users. Device lifecycle is already managed via
sysfs.

The ioctl interface also increases the attack surface and is the
subject of a number of bug reports.

Remove the character device, the IOCTL definitions, and the related
data structures (adf_dev_status_info, adf_user_cfg_key_val,
adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused
adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal
module_init/module_exit hooks for workqueue, AER, and crypto/compression
algorithm registration.

Clean up leftover dead code that was only reachable from the removed
IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(),
adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(),
adf_get_vf_real_id() and the unused ADF_CFG macros.

Additionally, drop the entry associated to QAT IOCTLs in
ioctl-number.rst.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < 071590a44cbc38483fceb1ab943363ec26868e1b
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < 1de076f43e64bf65fbe7280a269c70e0e60518df
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < 6848a6e39cac44fdb7cb88f0f777df62172d1551
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < b1ea97076bd0a5196290deba172034e480646727
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < b8ebf008696de1ec08c90d51f94d7e40bd448be1
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < de2cc38489b629927910b1aeff69bba7bd5c6f1b
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < 3ae49dd04dbb11fb73f17f58a982dba128abe83a
Status affected
Version d8cba25d2c68992a6e7c1d329b690a9ebe01167d
Version < d237230728c567297f2f98b425d63156ab2ed17f
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 3.17
Status affected
Version 0
Version < 3.17
Status unaffected
Version <= 5.10.*
Version 5.10.260
Status unaffected
Version <= 5.15.*
Version 5.15.211
Status unaffected
Version <= 6.1.*
Version 6.1.177
Status unaffected
Version <= 6.6.*
Version 6.6.144
Status unaffected
Version <= 6.12.*
Version 6.12.95
Status unaffected
Version <= 6.18.*
Version 6.18.37
Status unaffected
Version <= 7.0.*
Version 7.0.14
Status unaffected
Version <= 7.1.*
Version 7.1.2
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.034
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/071590a44cbc38483fceb1ab943363ec26868e1b
https://git.kernel.org/stable/c/1de076f43e64bf65fbe7280a269c70e0e60518df
https://git.kernel.org/stable/c/a4999664a5ef77bdb0c6e6b935f581ac8ce6b63a
https://git.kernel.org/stable/c/6848a6e39cac44fdb7cb88f0f777df62172d1551
https://git.kernel.org/stable/c/b1ea97076bd0a5196290deba172034e480646727
https://git.kernel.org/stable/c/b8ebf008696de1ec08c90d51f94d7e40bd448be1
https://git.kernel.org/stable/c/de2cc38489b629927910b1aeff69bba7bd5c6f1b
https://git.kernel.org/stable/c/3ae49dd04dbb11fb73f17f58a982dba128abe83a
https://git.kernel.org/stable/c/d237230728c567297f2f98b425d63156ab2ed17f